Unscored CVE-2007-4608 EUVD-2007-4590GHSA-49vq-f4w4-mc8m

PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute arbitrary PHP code vi…

Published Aug 31, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in protection.php in ePersonnel RC_2004_02 allows remote attackers to execute arbitrary PHP code via a URL in the logout_page parameter.

References

epersonnel-protection-file-include(36279) vdb-entry
38439 vdb-entry
20070827 ePersonnel_RC_2004 Remote File Bug mailing-list
3077 third-party-advisory